# Manager Correlation with more than one account

**URL:** <https://developer.sailpoint.com/discuss/t/manager-correlation-with-more-than-one-account/17862>\
**Category:** SHF Discussion and Questions\
**Tags:** correlation, sailpoint-identity-security\
**Created:** [September 20, 2023, 12:50pm UTC](https://developer.sailpoint.com/discuss/t/manager-correlation-with-more-than-one-account/17862 "2023-09-20T12:50:47Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![fmunerato](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/fmunerato/32/6029_2.png) [@fmunerato](https://developer.sailpoint.com/discuss/u/fmunerato)\
**Post date:** [September 20, 2023, 12:50pm UTC](https://developer.sailpoint.com/discuss/t/manager-correlation-with-more-than-one-account/17862/1 "2023-09-20T12:50:48Z")

</div>

Hi,

We have a scenario where we have an identity that has two Authoritative Source accounts attach to them, due to customer process we need to create a correlation rule for he Authoritative Source, since the user has two accounts attached IDN only takes into account the manager correlation of the oldest account. There is a way to change this behavior? Can IDN take into account only active accounts to calculate the manager?

Regards

---

<div class="post-metadata">

**Author:** ![sharvari](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@sharvari](https://developer.sailpoint.com/discuss/u/sharvari)\
**Post date:** [September 20, 2023, 1:14pm UTC](https://developer.sailpoint.com/discuss/t/manager-correlation-with-more-than-one-account/17862/2 "2023-09-20T13:14:02Z")

</div>

To achieve this you need to prioritize your Authoritative source Identity Profiles appropriately. The manager attribute would reflect from the source that has a higher priority in Identity Profile.

If that doesn’t help, you can look into using a Manager Correlation Rule for this.

---

<div class="post-metadata">

**Author:** ![fmunerato](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/fmunerato/32/6029_2.png) [@fmunerato](https://developer.sailpoint.com/discuss/u/fmunerato)\
**Post date:** [September 20, 2023, 4:19pm UTC](https://developer.sailpoint.com/discuss/t/manager-correlation-with-more-than-one-account/17862/3 "2023-09-20T16:19:22Z")

</div>

Hum, we already have the IdentityProfile in the highest priority, but the user have two accounts from the same source.

---

<div class="post-metadata">

**Author:** ![sharvari](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@sharvari](https://developer.sailpoint.com/discuss/u/sharvari)\
**Post date:** [September 20, 2023, 4:36pm UTC](https://developer.sailpoint.com/discuss/t/manager-correlation-with-more-than-one-account/17862/4 "2023-09-20T16:36:13Z")

</div>

Well in that case you can try applying a transform on manager attribute. Within transform you can include logic to pick the active account based on account attributes.

---

<div class="post-metadata">

**Author:** ![fmunerato](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/fmunerato/32/6029_2.png) [@fmunerato](https://developer.sailpoint.com/discuss/u/fmunerato)\
**Post date:** [September 20, 2023, 4:41pm UTC](https://developer.sailpoint.com/discuss/t/manager-correlation-with-more-than-one-account/17862/5 "2023-09-20T16:41:20Z")

</div>

Sharvari,

We try that as well, but I think that the manager attribute is related to the Manager Correlation, I think the manager attribute in the IdentityProfile are not taking into account to correlate the manager.

---

<div class="post-metadata">

**Author:** ![fmunerato](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/fmunerato/32/6029_2.png) [@fmunerato](https://developer.sailpoint.com/discuss/u/fmunerato)\
**Post date:** [September 22, 2023, 1:25pm UTC](https://developer.sailpoint.com/discuss/t/manager-correlation-with-more-than-one-account/17862/6 "2023-09-22T13:25:27Z")

</div>

Just to give an Update,

We solve the problem by creating a **[filterString](https://community.sailpoint.com/t5/IdentityNow-Wiki/IdentityNow-Account-Filtering-during-Account-Aggregation/ta-p/142873)** to exclude accounts disabled for a long time, since we have only the newest account correlated to the Identity the Manager attribute was fixed.

But probably if you guys do not have a way to do that, the Manager Correlation rule will be de only solution.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [November 21, 2023, 1:26pm UTC](https://developer.sailpoint.com/discuss/t/manager-correlation-with-more-than-one-account/17862/7 "2023-11-21T13:26:13Z")

</div>

Closed on November 21, 2023, 1:26pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
